Two XSS vulnerabilities were identified in the Google.com website, which allow an attacker to impersonate legitimate members of Google’s services or to mount a phishing attack. Although Google uses common XSS countermeasures, a successful attack is possible, when using UTF-7 encoded payloads.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42615/googleXSS-2.txt
Source: https://packetstormsecurity.com/files/42615/googleXSS-2.txt.html